Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
File:                     9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft (raw, json)
Hash identifier:          wh6qS8irowCGGu/X7PBJv826Ob3Uc7cI2PvsoN0mIzg=
Subject key identifier:   3D:C5:39:F7:7D:8C:63:E9:8C:14:24:B2:B1:3C:BB:9B:AF:5B:99:D2
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Certificate issuer:       /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial:       01A1A9711869C107C94D66F6F77D80A11186
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
Manifest number:          1B13
Signing time:             Thu 05 Nov 2026 02:02:03 +0000
Manifest this update:     Thu 05 Nov 2026 02:02:03 +0000
Manifest next update:     Fri 06 Nov 2026 02:02:03 +0000
Files and hashes:         1: 6nu1OXtk7kpMQlaYK9eE_KRKv_8.roa (hash: wI/dM+o6nDmiOXGvtoGjVjdd+0fyCUU9tuBohCftX8M=)
                          2: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl (hash: uudgRzyXYWy2dnwLk/r+H4Dht6nm9Hm2twqSfyLGoVw=)
                          3: Ecc1uLkv62Npv2ZtykPIlz8fvJ4.roa (hash: PlWjmtPxw4OkvYH5bNtiXs3BOmA0kF3dQLpadBG2s+E=)
                          4: GaY0PBVBeo4KpiNFKZ9BeK4puOg.roa (hash: kSV2htK/TB9FGgHOzLvBWeHTLFTLf67Ynu1IuSCMkQQ=)
                          5: cjcmiOtDDlTjyYQyKCJamvURnkg.roa (hash: kI1yDYXFOnMe/2BdFboj81gzmTgi8ptrjeCtHHILCuc=)
                          6: l2FIOzPFvXObRwUNiGKUwkx8yng.roa (hash: U27wT6U0NEvNHvjZg6ZUfLZqVxl9USYItoeoVAzNuao=)
                          7: wdNyk0cj7ZXHBOyRtNKSRHIMVM4.roa (hash: oARchr96uMH1VEdClz/RFIsJnl10GfEYjwsXH9UCt0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 02:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a9:71:18:69:c1:07:c9:4d:66:f6:f7:7d:80:a1:11:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
        Validity
            Not Before: Nov  5 02:02:03 2026 GMT
            Not After : Nov  6 02:02:03 2026 GMT
        Subject: CN=3dc539f77d8c63e98c1424b2b13cbb9baf5b99d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:89:94:e9:91:53:d9:1d:0b:98:6c:be:2d:
                    36:d0:9c:28:a7:d6:04:d2:fc:f1:6b:b2:88:de:01:
                    1a:c0:75:fb:19:b7:f1:4b:b4:e9:9b:51:8c:26:02:
                    47:a9:1d:c0:ea:3b:40:c0:55:e5:6e:95:10:a4:d0:
                    18:53:3c:4b:b4:79:c2:83:c7:bd:7a:3d:1e:6a:d6:
                    67:47:87:b7:da:f5:5a:d5:a9:8d:8f:61:09:29:ae:
                    56:99:de:2b:55:94:b7:50:6b:e7:ac:2e:97:36:6e:
                    24:30:ff:42:2b:f0:19:25:fc:cc:42:93:29:28:a6:
                    c4:79:a0:89:ff:1f:f9:a4:17:16:e0:11:af:56:a4:
                    2f:ce:76:2b:70:44:a9:7c:58:39:ee:4d:0b:01:17:
                    ac:7f:07:42:73:af:e0:0b:fa:86:76:53:09:40:41:
                    58:f0:4e:fd:ac:9f:03:1a:30:26:75:f6:5a:b0:dc:
                    40:2b:20:ae:c6:90:8f:b3:b6:97:41:b3:26:5e:57:
                    ab:98:ee:f6:fd:64:76:0f:f2:40:90:dd:54:35:b5:
                    fd:dd:f4:e4:a4:8d:bf:81:cf:66:83:7b:4f:68:7b:
                    d5:4b:d7:32:b3:5a:ef:48:b9:0f:b7:c2:c7:47:4d:
                    49:7b:71:f1:2c:60:01:8c:cf:f7:54:6d:96:04:27:
                    b2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C5:39:F7:7D:8C:63:E9:8C:14:24:B2:B1:3C:BB:9B:AF:5B:99:D2
            X509v3 Authority Key Identifier:
                keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:30:ab:34:7b:ca:c3:95:15:15:2c:1b:fd:3e:30:1e:59:9a:
         e7:a1:89:d0:f7:93:99:e4:77:6b:a1:9e:16:8d:f0:35:cf:9f:
         f6:5b:c2:51:06:62:f0:e9:3c:73:01:b5:05:04:42:47:f5:69:
         e7:f9:db:0b:35:4b:c7:38:ae:57:3a:45:73:19:27:57:11:c3:
         37:7a:8f:87:83:4a:45:12:ad:1d:76:c1:0a:da:32:ca:2f:ff:
         a4:e4:c7:01:ba:10:d6:d1:f4:3b:5d:99:0f:4a:4d:ea:e0:3f:
         13:9d:8d:ed:5a:ba:f6:e1:8e:19:c2:89:4e:89:f4:9f:00:b1:
         4b:a7:05:f9:d0:dc:da:8b:7e:0b:af:b7:5d:02:dc:b0:1c:cf:
         3d:d9:84:3f:37:11:64:e1:2f:1e:3d:c0:e6:3b:61:f2:70:1a:
         4d:aa:55:53:49:17:be:e8:25:00:2b:fe:ae:6f:16:37:9b:8e:
         de:32:30:ee:7d:3d:d8:3d:b4:49:dc:9a:6a:e6:a1:29:49:94:
         19:17:0b:fc:3b:48:f5:95:7d:9f:49:65:39:17:59:a9:f8:54:
         e3:55:ed:c0:6b:ac:33:cc:ba:cd:25:06:a7:4f:d4:a6:13:54:
         1a:59:34:0a:f9:e1:4c:93:45:68:26:94:cf:6f:83:f8:7f:84:
         c4:e6:15:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 08:18:38 2026 by rpki-client